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CLMPTO 
Michelle R. Eason 

Please cancel dalms 1-43 and add new claims 44-49 m follows: 

44. (New) A method deluding the following: 

at a certification authority, receiving an executable program generated by a party 
inde pendent of the certification authority; 

at the certification authority, determining that no specification is available to the 
certification authority adequately describing the operations of the executable program; 

at the certification authority, testing the executable program and, based on the 
results of the testing-, generating a -specification describing the operation of the 
executable program; and 

at the certification authority, generating a digital certificate certifying that the 
executabfe program operates in the manner described in the specification, 

45. (New) A method as m claim 44. further including; 

receiving the executable program at a user site; 

receiving the digital certificate at the user site; 

at the user site, evaluating the digital certificate to determine if the digital 
certificate is associated with the executable program; 

at the site site, evaluating the digital certificate to determine whether to execute 
the executable program; and 
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I at the user site, executing the executable program, the execution being 

i 

j dependent on the evaluation of the digital certificate. 
48. (New) A method as in claim 45, in which: 
the digital certificate specifies a security leveL and 

the user site equation of the digital certificate to determine whether to execute 
j me executable program includes comparing the security level to a required security 
| level 


47, (New) A method as in claim 45, tn which: 

the user site evaluation of the digital certificate to determine If the digital 
j certificate is associated with the executable program includes comparing a hash value 
[ stored in the digital certificate to at teast a portion of the executable program. 

48, (New) A method as in claim 47. in which: 

the hash value comparison is preceded by the ussr site decrypting the hash 
| value using a public key associated wrth the certrflcation authority, 

49, (New} A method as in claim 45, m which; 

the digital certificate includes the specification, and the step of evaluating the 
I digital certificate to determine whether to execute the executable program includes 
| evaluating the specification. 
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